Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File:                     1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier:          DhbuNXewh6f0O71coqsil8NZty3/xSYgzIhaYY7jDjU=
Subject key identifier:   A9:AD:06:40:FB:71:5A:E5:41:09:6F:2E:DC:7C:D9:0F:76:38:31:1E
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer:       /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number:          01C5
Signing time:             Thu 21 May 2026 03:49:35 +0000
Manifest this update:     Thu 21 May 2026 03:49:35 +0000
Manifest next update:     Thu 28 May 2026 03:49:35 +0000
Files and hashes:         1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: LtzLKc8LAhaf3DQm+r44Kwy7PJE9SYkdHYKFNz/t4nA=)
                          2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: jklc5FCt+euFYSuGUqrd6cbV/UlBPA4BDg0VukL1DA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
        Validity
            Not Before: May 21 03:49:35 2026 GMT
            Not After : May 28 03:49:35 2026 GMT
        Subject: CN=6a0e80cf-e006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:90:f6:14:16:f1:aa:10:50:f4:a6:1d:86:
                    bf:84:ad:a2:99:e7:00:bb:84:ae:73:6a:46:17:e7:
                    9d:24:c9:2a:8b:86:ea:d5:0e:bb:33:34:59:5c:f4:
                    bb:23:ff:e2:10:d4:7a:17:d6:a7:ba:20:b2:8e:d8:
                    a2:e5:db:64:de:55:34:aa:f9:97:c4:b9:69:04:d0:
                    2c:ed:b7:dc:72:81:5c:23:54:62:4d:84:85:41:80:
                    1e:75:c9:44:7b:1f:e7:3a:50:01:e7:eb:a3:9e:99:
                    f5:49:70:26:ef:cc:ff:1f:c4:1f:be:21:d9:77:44:
                    d6:e6:9c:95:12:78:2f:a8:0f:36:09:76:ce:72:f4:
                    10:94:b3:d5:f5:40:01:1f:2b:33:e5:f3:9b:75:d3:
                    39:3e:ed:4c:ae:53:f4:0e:b5:7d:be:48:f3:80:3f:
                    32:ec:ed:c5:4a:d1:28:f2:c9:ea:87:4e:19:4e:69:
                    83:cc:54:4e:f3:f5:88:2b:59:62:ff:fc:02:e6:1d:
                    b7:9f:18:23:ef:7a:e5:11:bf:ff:e0:21:05:55:35:
                    4e:15:6e:63:3a:99:59:e3:dd:9b:22:9a:28:2e:da:
                    0f:84:1f:45:31:a5:11:0d:8c:46:dd:4a:27:59:3e:
                    d9:19:16:ee:a7:22:cb:2c:55:24:4f:5c:8b:59:b7:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:06:40:FB:71:5A:E5:41:09:6F:2E:DC:7C:D9:0F:76:38:31:1E
            X509v3 Authority Key Identifier:
                keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:c5:56:e4:55:18:cf:09:fd:b3:57:c0:ca:8c:68:d1:ff:
         ca:17:80:a2:0e:e8:4d:9c:b7:b6:97:aa:7f:11:8f:47:58:31:
         ac:c8:d3:57:a5:49:b3:d5:f9:be:8b:0d:7d:43:cb:3d:0a:9b:
         e0:1e:54:f7:2b:37:0a:c7:12:52:e1:f6:b5:dd:a2:10:7f:5b:
         98:27:4b:b0:ca:4e:c0:c8:5e:1e:43:3c:98:eb:d1:8d:58:cf:
         bb:b7:6d:1f:6c:47:b6:36:17:2b:c9:45:09:57:c5:62:2f:2c:
         1a:4a:0a:85:bf:50:d5:e1:b8:50:4c:ec:d0:34:4a:1c:50:ca:
         a6:a7:e6:bd:49:b6:30:79:5d:b6:ff:07:c8:ab:35:64:65:c6:
         49:6b:13:92:6d:15:1e:ab:f8:3e:83:d8:fa:61:3d:24:c7:1a:
         84:c2:ca:de:18:79:b2:32:7e:0c:00:3a:27:23:cb:d1:d0:2e:
         91:95:59:38:0c:24:38:21:fe:13:56:e2:da:ff:ab:53:ea:10:
         2d:ec:06:93:91:7a:08:d6:60:41:e4:10:f0:8b:b4:a1:79:a4:
         ae:ff:49:49:6d:57:d7:20:8d:b2:d7:42:7c:f1:2b:a5:05:1a:
         84:15:04:37:e2:3d:c8:78:30:2f:e7:53:fe:3e:6b:3d:f0:25:
         51:43:de:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0
RTY1RkRGMjIwHhcNMjYwNTIxMDM0OTM1WhcNMjYwNTI4MDM0OTM1WjAYMRYwFAYD
VQQDEw02YTBlODBjZi1lMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5iQ9hQW8aoQUPSmHYa/hK2imecAu4Suc2pGF+edJMkqi4bq1Q67MzRZXPS7
I//iENR6F9anuiCyjtii5dtk3lU0qvmXxLlpBNAs7bfccoFcI1RiTYSFQYAedclE
ex/nOlAB5+ujnpn1SXAm78z/H8QfviHZd0TW5pyVEngvqA82CXbOcvQQlLPV9UAB
Hysz5fObddM5Pu1MrlP0DrV9vkjzgD8y7O3FStEo8snqh04ZTmmDzFRO8/WIK1li
//wC5h23nxgj73rlEb//4CEFVTVOFW5jOplZ492bIpooLtoPhB9FMaURDYxG3Uon
WT7ZGRbupyLLLFUkT1yLWbeYEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmtBkD7
cVrlQQlvLtx82Q92ODEeMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw
QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr
d3BsRlBNdEkxM3RPWmYzeUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqm7FVuRVGM8J/bNXwMqMaNH/yheAog7oTZy3tpeqfxGPR1gxrMjTV6VJs9X5
vosNfUPLPQqb4B5U9ys3CscSUuH2td2iEH9bmCdLsMpOwMheHkM8mOvRjVjPu7dt
H2xHtjYXK8lFCVfFYi8sGkoKhb9Q1eG4UEzs0DRKHFDKpqfmvUm2MHldtv8HyKs1
ZGXGSWsTkm0VHqv4PoPY+mE9JMcahMLK3hh5sjJ+DAA6JyPL0dAukZVZOAwkOCH+
E1bi2v+rU+oQLewGk5F6CNZgQeQQ8Iu0oXmkrv9JSW1X1yCNstdCfPErpQUahBUE
N+I9yHgwL+dT/j5rPfAlUUPeIQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:29 2026 by rpki-client